chore(deps): update all github action dependencies

cilium-renovate[bot] · julianwiedmann · commit 47cb8d7559eb · 2026-03-16T09:35:10.000Z
Signed-off-by: cilium-renovate[bot] &lt;134692979+cilium-renovate[bot]@users.noreply.github.com&gt;
diff --git a/.github/actions/cosign/action.yaml b/.github/actions/cosign/action.yaml
@@ -50,11 +50,11 @@ runs:
   steps:
     - name: Install Cosign
       if: ${{ inputs.install_cosign == 'true' }}
-      uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
+      uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
     - name: Generate SBOM
       if: ${{ inputs.generate_sbom == 'true' }}
-      uses: anchore/sbom-action@17ae1740179002c89186b61233e0f892c3118b11 # v0.23.0
+      uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
       with:
         artifact-name: sbom_${{ inputs.sbom_name }}.spdx.json
         output-file: ./sbom_${{ inputs.sbom_name }}.spdx.json
diff --git a/.github/workflows/build-images-base-v1.19.yaml b/.github/workflows/build-images-base-v1.19.yaml
@@ -292,7 +292,7 @@ jobs:
           mkdir -p image-digest/
 
       - name: Download digests of all images built
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: image-digest/
           pattern: "*image-digest *"
diff --git a/.github/workflows/build-images-beta.yaml b/.github/workflows/build-images-beta.yaml
@@ -154,7 +154,7 @@ jobs:
           mkdir -p image-digest/
 
       - name: Download digests of all images built
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: image-digest/
           pattern: "*image-digest *"
diff --git a/.github/workflows/build-images-ci-v1.19.yaml b/.github/workflows/build-images-ci-v1.19.yaml
@@ -372,7 +372,7 @@ jobs:
           mkdir -p image-digest/
 
       - name: Download digests of all images built
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: image-digest/
           pattern: "*image-digest *"
@@ -422,7 +422,7 @@ jobs:
         }}
     steps:
       - name: Generate Github App Token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         id: generate-token
         with:
           app-id: ${{ secrets.AUTO_COMMENT_BOT_APP_ID }}
diff --git a/.github/workflows/build-images-releases.yaml b/.github/workflows/build-images-releases.yaml
@@ -180,7 +180,7 @@ jobs:
           mkdir -p image-digest/
 
       - name: Download digests of all images built
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: image-digest/
           pattern: "*image-digest *"
diff --git a/.github/workflows/conformance-clustermesh.yaml b/.github/workflows/conformance-clustermesh.yaml
@@ -68,7 +68,7 @@ env:
   contextName2: kind-cluster2-${{ github.run_id }}
 
   # renovate: datasource=github-releases depName=cert-manager/cert-manager
-  CERT_MANAGER_VERSION: v1.19.4
+  CERT_MANAGER_VERSION: v1.20.0
 
 jobs:
   echo-inputs:
diff --git a/.github/workflows/conformance-gke.yaml b/.github/workflows/conformance-gke.yaml
@@ -96,7 +96,7 @@ env:
   clusterName: ${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }}-${{ github.run_attempt }}
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
   # renovate: datasource=docker depName=google/cloud-sdk
-  gcloud_version: 559.0.0
+  gcloud_version: 560.0.0
 
 jobs:
   echo-inputs:
diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: docs-tree
         with:
           # For `push` events, compare against the `ref` base branch
diff --git a/.github/workflows/k8s-kind-network-e2e.yaml b/.github/workflows/k8s-kind-network-e2e.yaml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: tested-tree
         with:
           # For `push` events, compare against the `ref` base branch
diff --git a/.github/workflows/lint-bpf-checks.yaml b/.github/workflows/lint-bpf-checks.yaml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: changes
         with:
           # For `push` events, compare against the `ref` base branch
diff --git a/.github/workflows/lint-build-commits.yaml b/.github/workflows/lint-build-commits.yaml
@@ -61,7 +61,7 @@ jobs:
           echo "head-commit=$head_commit" >> $GITHUB_OUTPUT
 
       - name: Check bpf code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: bpf-changes
         with:
           # If these filters are modified, also modify the step:
@@ -73,7 +73,7 @@ jobs:
               - '!**/*.md'
 
       - name: Check test code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: test-changes
         with:
           # If these filters are modified, also modify the step:
diff --git a/.github/workflows/tests-datapath-verifier.yaml b/.github/workflows/tests-datapath-verifier.yaml
@@ -222,7 +222,7 @@ jobs:
         persist-credentials: false
 
     - name: Download per-kernel results
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         path: ./artifacts
         pattern: datapath-verifier_*
diff --git a/.github/workflows/tests-smoke-ipv6.yaml b/.github/workflows/tests-smoke-ipv6.yaml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: tested-tree
         with:
           # For `push` events, compare against the `ref` base branch
diff --git a/.github/workflows/tests-smoke.yaml b/.github/workflows/tests-smoke.yaml
@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: tested-tree
         with:
           # For `push` events, compare against the `ref` base branch
